8.50API input should be considered untrusted

Even if it's an internal API:

Mule receives data

Do not assume:

caller is internal
→ input is safe

Validate:

required fields
allowed values
size limits
formats
unexpected fields if contract requires strictness

Then transform only what should flow downstream.